wpscan基础用法

wpscan

• 简单介绍wpscan的常用方法

--url  					网站url
--disable-tls-checks	不做TLS检查，https协议绕过
--api-token           令牌，需在官网获得，没令牌看不到插件漏洞
--plugins-detection   三个可选项：mixed, passive(默认), aggressive， 每个选项都试下，防止插件不被扫出
-e  p(枚举插件)  vp(枚举插件漏洞)

参考手册

Usage: wpscan [options]
        --url URL                                 The URL of the blog to scan
                                                  Allowed Protocols: http, https
                                                  Default Protocol if none provided: http
                                                  This option is mandatory unless update or help or hh or version is/are supplied
    -h, --help                                    Display the simple help and exit
        --hh                                      Display the full help and exit
        --version                                 Display the version and exit
    -v, --verbose                                 Verbose mode
        --[no-]banner                             Whether or not to display the banner
                                                  Default: true
    -o, --output FILE                             Output to FILE
    -f, --format FORMAT                           Output results in the format supplied
                                                  Available choices: cli-no-colour, cli-no-color, json, cli
        --detection